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DETAILED ACTION 



1 . This Office Action is responding to the Amendment received on 09/1 9/06. 

2. Claims 1-1 1 are pending. 

3. Examiner considers the change of priority status of the present application. As 
responded by the Applicant on 09/22/06, the present application is a divisional of 
pending US application number 09/381 ,742 filed August 21,1 998 and in which 
has priority back to its latest non-provisional of provisional application filing date 
of 08/22/1997. 

Response to Arguments 

4. Applicant's arguments filed on 09/19/06 are persuasive objected in light of 
limitation of claim 3. Therefore, the rejection of claims 3, 10, and 1 1 are 
withdrawn (See allowability subject matter below) 

5. Applicant's arguments filed on 09/19/06 have been fully considered but they are 
not persuasive with respect to claim 1, 2, and 4-9. 

6. As per remark on page 3 (Bullet 1-a), Applicant argues that Casselberry's failure 
to disclose required elements of claim 1-2. Examiner respectfully disagrees. 

7. As per claim 1 , Applicant recites "a method of configuring the server program so 
that it listens for requests for secure hypertext transfer protocol sessions on the 
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second port number rather than the first port number 11 . As admitted by the 
Applicant on page of the remark and also taught in Casselberry in Chapter 5 
page 1 0 (Network Settings), The HTTPS port can be modified to listen on any 
port ranging 1-65535. As Casselberry teaches in Chapter 5 page 10 (Network 
Settings), again the HTTPS port can be modified to listen on any port ranging 1- 
65535. Casselberry teaches of modifying the HTTPS port to any port that an 
ordinary skill in the art desires to without any restriction or technical difficulty. As 
strong supported by Casselberry's disclosure, it would have been obvious for one 
having ordinary skill in the art at the time of the invention was made to modify 
HTTPS protocol port to port 80 with a motivation of tricking the hacker to think of 
one protocol, but in reality it is another protocol. 

8, In response to applicant's argument that the references fail to show certain 

features of applicant's invention, it is noted that the features upon which applicant 
relies (i.e., On page 5 3 rd paragraph, Applicant recites a limitation of the firewall 
blocks access to ports other than 80 as a reason to show Casselberry lacks in 
teaching to solve the invention's problem) are not recited in the rejected claim(s). 
Although the claims are interpreted in light of the specification, limitations from 
the specification are not read into the claims. See In re Van Geuns } 988 
F.2d 1 1 81 , 26 USPQ2d 1 057 (Fed. Cir. 1 993). 
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9. In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant 
relies (i.e., On page 1 3 2 nd Paragraph, "Applicant has been unable to figure out 
how the cited portions of Casselberry, which teach about changing the port on 
which a server listens for packets, can be viewed as disclosing anything about (i) 
a system that might block a packet if various conditions were satisfied or (ii) 
sending a packet through such a system on its way to an HTTPS server") are not 
recited in the rejected claim(s). Although the claims are interpreted in light of the 
specification, limitations from the specification are not read into the claims. See 
In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

1 0. As per remark on page 8-1 1 , Examiner does not find any of the arguments direct 
to a specific limitation of claim 1. 

11. As per remark on page 14 first paragraph, Applicant argues that "The Examiner 
has provided no prior art to support the Examiner's view that it would have been 
obvious at the time of Applicant's invention for one skilled in the art to modify 
Casselberry to include, in combination, all of the elements of claim 4 that are 
missing from Casselberry, including, inter alia: (2-a-1) configuring a server 
program to listen for requests for secure hypertext transfer protocol sessions on 
a port number associated with a hypertext transfer protocol and (2-a-2) receiving 
at the server program on the port number associated with a hypertext transfer 
protocol a first data packet that has passed through a system that is configured in 
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a manner that would block the first data packet if it were addressed to the port 
number associated with a secure hypertext transfer protocol" Respectfully 
reminding the Applicant, Claim 4 is depending on claim 1 and claim 1 does not 
recite "hypertext transfer protocol" or "hypertext transfer protocol port". As to the 
Applicant's argument, Casselberry also teaches of configuring a firewall with an 
access list to block all incoming packets except desired ports, for instant: port 80, 
25, and 23 (See Casselberry Chapter 5, page 13 first paragraph). With this in 
mind in additional to the teaching of modifying HTTPS port to any port ranging 
from 1-65535 in Chapter 5, for one having ordinary skill in the art would realize 
that a packet addressed to the first port or for this case other than 80, 25, and 23 
would not pass through. As evidenced, Casselberry provides a full support of 
claim 4. 

12. Therefore, the rejection basis for claims 1-2, and ^-9 dated 03/20/06 is 
maintained. 

Claim Rejections - 35 USC § 103 

13. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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14. Claims 1-2 and 4-9 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Rich Casselberry et al, ( http://www.docs.rinet.ru/Perfectlntranet/index.htm ), 
hereinafter "CASSELBERRY". 

15. As per claims 1-2: 

CASSELBERRY discloses "A method for securely communicating with a server 
program using a secure hypertext transfer protocol which by default uses a first port 
number associated therewith, said method practiced in connection with a hypertext 
transfer protocol which defaults to the use of a second port number associated 
therewith, "said method comprising: (a) configuring the server program so that it listens 
for requests for secure hypertext transfer protocol sessions on the second port number 
rather than the first port number" on (Chapter 5 page 9 Network Settings); (b) "receiving 
at the server program on the second port number a first data packet in a manner that is 
consistent with the secure hypertext transfer protocol, except that the request is 
received on the second port number rather than the first port number" on (Chapter 5 
page 10, First Paragraph); (c) "outputting from the server program a response to the 
first data packet in a manner that is consistent with the secure hypertext transfer 
protocol, except that the request was received on the second port number rather than 
the first port number" on (Chapter 5 page 9 Network Settings). However, 
CASSELBERRY does not explicitly teach a method of redirecting the https service to a 
second port other than its standard port. Nevertheless, CASSELBERRY teaches a 
method of binding a https service to another port ranging from 1 to 65535 different from 
its standard port and also gives an example of how to access the host that has a 
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nonstandard port using an URL redirecting (Chapter 5, Page 9, last paragraph and 
Page 10 first paragraph). Therefore, it would have been obvious at the time of the 
invention was made for one having ordinary skill in the art to realize that 
CASSELBERRY teaches a method of binding any second port ranging from 1-65535 
different from its standard port to tighten the security of its server by tricking the hacker 
to think of one protocol, but in reality it is another protocol. 

16. As per claim 4: 

CASSELBERRY does not explicitly teach "the first data packet is received by the server 
program on the second port, it passes through a system that is configured in a manner 
that would block the first data packet if the first data packet were addressed to the first 
port". Nevertheless, CASSELBERRY does teach a method of binding a nonstandard 
port a service hosted at a server (Chapter 5, Page 9, last paragraph and Page 10 first 
paragraph). Therefore, it would have been obvious at the time of the invention was 
made for one having ordinary skill in the art to realize that the new binding service 
would not recognize any packet format other than its own. 

17. As per claims 5-9: 

CASSELBERRY does not explicitly teach "the following additional step: after 
step (a), directing a client program to request information from the server program using 
a resource locator comprising an indication to use the secure hypertext transfer protocol 
and an indication to use the second port number". Nevertheless, CASSELBERRY 
teaches a method of binding a https service to another port ranging from 1 to 65535 
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different from its standard port and also gives an example of how to access the host that 
has a nonstandard port by using an URL port redirecting (Chapter 5, Page 9, last 
paragraph and Page 10 first paragraph). Therefore, it would have been obvious at the 
time of the invention was made for one having ordinary skill in the art to realize that 
CASSELBERRY teaches a method of binding any second port ranging from 1-65535 
different from its standard port to tighten the security of its server by tricking the hacker 
to think of one protocol, but in reality it is another protocol. 



Allowable Subject Matter 



18. Claims 10-11 are allowed. 

id 

19. Claims 3-aise objected to as being dependent upon a rejected base claim, but 
would be allowable if rewritten in independent form including all of the limitations 
of the base claim and any intervening claims. 

20. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571- 
272-3856. The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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